Analysis
-
max time kernel
146s -
max time network
149s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
04/10/2024, 13:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
z.exe
Resource
win7-20240903-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
z.exe
Resource
win10-20240404-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
z.exe
Resource
win10v2004-20240802-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
z.exe
Resource
win11-20240802-en
2 signatures
150 seconds
General
-
Target
z.exe
-
Size
22.5MB
-
MD5
022c1bd832b05b800a2647c49ad0bd6e
-
SHA1
81142d8bffceaa5efb297ad0786ea290c431ded4
-
SHA256
1ac9370e49aa276849c2f25ab93af38efbc47670e3e8cfa0d96822dfb637e6e0
-
SHA512
31463d89cbddbbcf5692c8457a07879a0a820856e438a68936dd9a62e631e6ca5609295bb0bcb552227768d121667f512cba590dd74706289961cd5e2d1c5ac0
-
SSDEEP
393216:hmcOdREEnu9PajcVqye/L2rY/wFz1iG1A9LZkDYLLyfJsdjVgzTbAC:h8dR7noPAND2skkG+qDcWf0jVg8
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 952 z.exe 952 z.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 952 z.exe 952 z.exe